264453 matches found
[SECURITY] Fedora 44 Update: rest-0.10.2-9.fc44
This library was designed to make it easier to access web services that claim to be "RESTful". A RESTful service should have urls that represent remote objects, which methods can then be called on. The majority of services don't actually adhere to this strict definition. Instead, their RESTful en...
CLEANSTART-2026-OB74177 Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5
Multiple security vulnerabilities affect the spring-boot package. Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5. See references for individual vulnerability details...
CVE-2017-5618-Screen-4.5.0-Root
Exploit de escalada de privilegios local para GNU Screen 4.5.0 CVE-2017-5618 📌 Resumen Exploit de escalada de privilegios local para GNU Screen 4.5.0 que secuestra la carga de bibliotecas compartidas para obtener acceso root mediante la manipulación de ld.so.preload. 🔧 Detalles técnicos...
PT-2026-90524
A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...
OPENSUSE-SU-2026:11759-1 tomcat-9.0.121-1.1 on GA media
These are all security issues fixed in the tomcat-9.0.121-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11758-1 steampipe-2.4.6-1.1 on GA media
These are all security issues fixed in the steampipe-2.4.6-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11752-1 kubevirt1.9-container-disk-1.9.0-3.1 on GA media
These are all security issues fixed in the kubevirt1.9-container-disk-1.9.0-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11761-1 tomcat11-11.0.25-1.1 on GA media
These are all security issues fixed in the tomcat11-11.0.25-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-90498
Concrete CMS below 9.5.3 does not apply HTML output escaping to the file description and tags fields when rendering the Document Library block, so a user with permission to edit file properties could store a script payload that executed in the browser of any visitor to a page displaying the block...
OPENSUSE-SU-2026:11756-1 python311-3.11.16-1.1 on GA media
These are all security issues fixed in the python311-3.11.16-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11750-1 chromedriver-153.0.8010.36-1.1 on GA media
These are all security issues fixed in the chromedriver-153.0.8010.36-1.1 package on the GA media of openSUSE Tumbleweed...
AlmaLinux 9 : git-lfs (ALSA-2026:66364)
The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:66364 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Denial of...
PT-2026-89791
multiparty is a Node.js library for parsing multipart/form-data request bodies. In versions from 2.1.0 up to but not including 4.3.1, the parser does not bound the amount of memory used while accumulating the headers of a single multipart part. An unauthenticated attacker can send a single reques...
Linux Distros Unpatched Vulnerability : CVE-2026-88038
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cookies is a Node.js library for reading and writing HTTP cookies, used by Koa via ctx.cookies. In versions before 0.9.2 the library validates the cookie name a...
Linux Distros Unpatched Vulnerability : CVE-2026-87908
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - multiparty is a Node.js library for parsing multipart/form-data request bodies. In versions from 2.1.0 up to but not including 4.3.1, the parser does not bound...
OPENSUSE-SU-2026:11753-1 libBasicUsageEnvironment2-2026.08.25-1.1 on GA media
These are all security issues fixed in the libBasicUsageEnvironment2-2026.08.25-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11760-1 tomcat10-10.1.59-1.1 on GA media
These are all security issues fixed in the tomcat10-10.1.59-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11754-1 perl-DBI-1.653.0-1.1 on GA media
These are all security issues fixed in the perl-DBI-1.653.0-1.1 package on the GA media of openSUSE Tumbleweed...
ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input
A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting XSS by providing untrusted input to the Address6 constructor. When an application renders the output of...